Certificate
$ rpki-client -vvf rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer
File: fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.cer (raw, json)
Hash identifier: gTtVCxOlNTBRJc58iwE5SMuj3TX56M1h+LNAa3cCYdk=
Subject key identifier: 7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
Authority key identifier: 74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
Certificate issuer: /CN=A90DC5BE/serialNumber=740165A80D1071970ABC09C02B71C1AC7C1D6E0E
Certificate serial: 622A
Authority info access: rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
Manifest: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
caRepository: rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/
Notify URL: https://rrdp.apnic.net/notification.xml
Certificate not before: Sat 15 Feb 2025 15:21:26 +0000
Certificate not after: Tue 31 Mar 2026 00:00:00 +0000
Subordinate resources: IP: 137.83.12.0/24
Validation: OK
Signature path: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 05 Apr 2025 02:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 25130 (0x622a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A90DC5BE
Validity
Not Before: Feb 15 15:21:26 2025 GMT
Not After : Mar 31 00:00:00 2026 GMT
Subject: CN=A91971CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:fd:0c:98:12:91:91:ca:fc:97:4d:3d:43:
bc:bb:c2:55:75:a7:7b:8b:bb:c2:6b:aa:e8:9b:40:
08:98:2f:7b:f4:e8:3e:fc:08:a1:75:3e:3a:76:fe:
7b:76:33:5c:db:ed:23:af:cb:65:4c:e1:86:6d:09:
db:b8:46:03:15:94:0e:34:74:2c:dd:48:ea:40:f5:
97:54:df:0c:d2:b0:37:8d:6c:9f:3f:65:a7:76:1e:
5d:be:fb:67:09:94:c8:1d:b9:b8:e5:a9:a0:52:d5:
ca:31:63:14:88:62:02:17:88:33:6f:a7:3b:47:f2:
48:5f:27:4d:ae:c2:69:59:52:f2:ea:aa:43:15:22:
b3:88:86:75:99:be:af:b7:86:4e:a6:69:67:54:53:
36:35:b1:6b:3e:d5:45:a7:35:9c:1b:1e:91:bd:7d:
e8:eb:2d:86:4c:3c:fe:2d:b5:b8:4b:54:19:12:96:
2e:52:3a:eb:b4:9f:9a:5f:8d:78:43:cc:10:8c:20:
63:d0:23:58:21:36:6d:55:69:63:76:0b:5e:3d:e4:
43:a4:80:e4:ea:f0:a6:ec:15:61:18:e9:46:9b:42:
03:c7:ec:41:cd:c6:9e:d2:86:4e:05:57:2e:78:a1:
32:3b:13:b3:f4:51:d1:27:4d:c2:4f:06:3f:bc:3b:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:04:51:65:B2:9A:68:AF:CB:8B:A8:15:99:CE:30:67:45:44:FD:8F
X509v3 Authority Key Identifier:
keyid:74:01:65:A8:0D:10:71:97:0A:BC:09:C0:2B:71:C1:AC:7C:1D:6E:0E
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
CA Repository - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/
RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A91971CB/7A750A0A2DD811EA9C35205DC4F9AE02/fQRRZbKaaK_Li6gVmc4wZ0VE_Y8.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
137.83.12.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a9:82:83:09:63:0b:9b:35:92:2c:09:1c:b1:7e:00:5b:14:
d2:c0:bf:43:70:c6:12:b7:d3:c4:41:0f:80:4e:b2:f4:d0:55:
8f:1a:2b:0d:f1:71:da:87:d0:22:86:9d:61:7e:da:c6:df:64:
4f:7c:24:8b:db:ad:d5:f5:86:a2:38:53:8a:fe:22:dd:98:39:
af:59:f1:53:8a:f4:e3:8f:8e:54:fb:7e:ab:cb:56:6a:ba:47:
00:3e:5c:e5:22:9f:3e:13:7f:6f:78:b7:d6:b8:f2:98:e8:55:
60:3e:74:40:ab:96:e4:64:7e:14:5c:83:e2:4e:b8:a8:0b:79:
2a:0b:db:42:3d:4d:e5:ed:04:e3:2b:15:da:6d:02:6e:b0:7c:
e1:63:4f:1d:56:9f:6e:b7:75:c8:05:8b:93:ce:88:d2:b8:70:
e9:e1:c6:cc:06:83:b0:bf:ee:86:ce:07:f3:32:69:30:f8:7b:
b1:43:c2:c8:1b:2e:34:10:3b:c8:8a:a2:80:ee:9d:76:34:be:
cb:4d:69:aa:a4:8f:2e:10:db:95:03:65:24:25:36:24:4f:a4:
fc:0a:ab:20:39:f6:2c:52:36:1f:d9:5a:bf:6e:a8:74:cc:81:
10:a2:bf:89:83:cc:91:98:f0:89:ec:e9:bb:92:3c:3c:9b:0f:
52:ce:4e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 11:35:19 2025 by rpki-client